Redundant Email Address Detection And 
Capture System 



5 BACKGROU ND OF THE INVENTION 

TECHNICAL FIELD 

The invention relates to electronic messaging. More particularly, the invention 
10 relates to a redundant email address detection and capture system. 

DESCRIPTION OF THE PRIOR ART 

Electronic messaging systems, such as email, are now commonly accepted 
15 and in widespread use. While such systems are provided to facilitate the 
exchange of information between parties desiring such intercourse, many 
interlopers exploit the openness of these systems to send spurious messages 
of a commercial or harassing nature. Such messages are commonly referred 
to as "spam" (see, for example, S. Michel, When marketing becomes spam, 
20 New Media Age , 20 (November 30 , 2000). The volume of spam is so great 
that, in many cases, one has to wade through dozens of worthless messages 
and systems administrators are often confronted with excessive demands on 
system capacity and throughput just to process spam. 

25 Some approaches to solving the problem of receiving unsolicited and 
unwanted messages include the following: 

Techniques for Eliminating Redundant Access Checking By Access Filters, 
U.S. Patent No. 6,105,027; Distribution Limiter for Network Messaging, U.S. 
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Patent No. 6,073,167; Inappropriate Site Management Software, U.S. Patent 
No. 6,065,055; Internet Filtering System for Filtering Data Transferred Over 
the Internet Utilizing Immediate and Deferred Filtering Actions, U.S. Patent 
No. 5,884,033; Block Junk E-maA] PC/Computing; v11, n11, p156 (November 
5 1998); CyberPR Cutting Spam Out of Your Diet With Email Filters; 
INTERACTIVE PR & MARKETING NEWS; v6, i2 (January 22, 1999); and 
Simple Software Commands Allow Users to Tame Unwanted Email; PR 
News; v54, i47 (November 30, 1998). 

10 Such techniques typically involve the use of filters that identify which particular 
messages are permitted or that are not permitted by checking lists of 
accepted or forbidden senders and/or subjects. A limitation with this 
approach is that the lists must be maintained or the filter becomes less 
effective with time because many 'spammers' are sophisticated and often 

15 change their identity to thwart such systems. It would therefore be advantage 
to provide a mechanism for automatically detecting such unwanted messages 
in real time. 

SUMMARY OF THE INVENTION 

20 

The invention provides a mechanism for automatically detecting such 
unwanted messages in real time, which is referred to herein as the Redundant 
Email Address Detection And Capture System (READACS). The READ ACS 
25 system assumes that incoming mail files have been written to a disk in a file 
format that is somewhat consistent and/or predictable by the programmer. 
The task of READACS is to identify those email message files, locate an 
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address-of-origin within those files, identify whether the email message should 
be considered spam, separate spam and non-spam email messages logically, 
and physically move or rename (or both) those email messages as desired by 
the programmer. 

5 

BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a flow diagram showing operation of the READACS program 
according to a presently preferred embodiment of the invention; 

10 

Fig. 2 is a flow diagram showing operation of the READACS program in 
connection with the processing of email according to a presently preferred 
embodiment of the invention; and 

15 Fig. 3 is a block schematic diagram showing an email system that 
incorporates the READACS program according to a presently preferred 
embodiment of the invention. 

DETAILED DESCRIPTION OF THE INVENTION 

20 

7he invention provides a mechanism for automatically detecting such 
unwanted messages in real time, which is referred to herein as the Redundant 
Email Address Detection And Capture System (READACS). The READACS 
program assumes that incoming mail files have been written to disk in a file 

25 format that is somewhat consistent and/or predictable by the programmer. 
The task of READACS is to identify those email message files, locate an 
address-of-origin within those files, identify whether the email message should 
be considered spam, separate spam and non-spam email messages logically, 
and physically move or rename (or both) those email messages as desired by 

30 the programmer. 
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Operation 

Fig. 1 is a flow diagram showing operation of the READACS progrann 
according to a presently preferred embodiment of the invention. While an 

5 exemplary program flow is shown in connection with Fig. 1, those skilled in 
the art will appreciate that the invention is readily implemented with other 
process flows, and that more or fewer steps and different sequences of steps 
may be used to implement the invention. The various defined terms in the 
immediately following discussion are also discussed in greater detail further 

10 below. 

When the program begins execution (100) a RecentFileList is read from a 
RecentFile and loaded into a RecentListArray (102). If a BypassFileList is 
included, it is read into a BypassArray (104). The system then creates a 

15 NewListArray (106). The system opens mail files and extracts the email 
addresses of the sender as defined in MaillnDlrName, AddrLineLocator, and 
AddrlnfoLocator fields (108). The system then loads the NewListArray with 
the new email addresses and the associated file names (110). An arrival time 
is set for all records in the NewListArray (112) and the NewListArray is 

20 combined into the RecentListArray, marking new records as IsNew = True 
(114). The RecentListArray is then sorted by email addresses (116). 

The program then examines the email messages to identify spam. A loop is 
entered in which each address in the RecentListArray is retrieved, one at a 
25 time (118). Those skilled in the art will appreciate that the actual processing 
of messages may occur in parallel. 
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If the end of the RecentList Array is reached (120), then the Recent ListArray 
is deleted and a RecentFlle is opened for writing (122). A next (or first) 
address in the RecentListArray is then retrieved (124) and a determination is 

5 made if the end of the RecentList Array is reached (126). If not, the record is 
examined to determine if it is marked as isExpired (128) and if so, program 
flow returns to retrieve the next address in the RecentListArray (124). If not, 
the email address and a corresponding time stamp are written to the 
RecentFile (130), and then program flow returns to retrieve the next address 

10 in the RecentListArray (124). 

If the end of the RecentList Array is not reached (120), then the system 
retrieves the next (or first) address in the RecentListArray (142) and a 
determination is made if the end of the RecentList Array is reached (144). If 

15 yes, all open file are closed and memory is cleaned up (146). This ends 
execution of the program (148). If not, a determination is made if the record is 
marked as IsNew (150). If not, a next record is retrieved (142) and program 
execution continues as indicated. If yes, the record is checked to determine if 
it is marked as IsSpam (see below) (152). If yes, the record is renamed 

20 and/or removed as defined by a SpamRenamePrefix/Suffix and a 
SpamDestinationDirName (156), and a next record is retrieved (142) and 
program execution continues as indicated. If not, the record is 
renamed/removed as defined by a RenamePrefix/Suffix and a 
DestinationDirName, and a next record is retrieved (142) and program 

25 execution continues as indicated. 
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Spam is determined as follows: When an address is retrieved from the 
RecentListArray (118) and the end of the array has not been reached (120) 
the age of the address is determined based upon a SecondsThreshold (132). 
If the message is older than the threshold, then the record is marked as 

5 IsExpired = True by Seconds Threshold (134). In either event, a 
determination is made whether the address occurs more often than the 
SourceThreshold allows (136). If not, another record is retrieved and 
examined (118), If yes, the address is examined to see if it is to be passed 
anyway because it is identified in the BypassArray (130). If yes, then another 

10 record is retrieved and examined (118). If the message exceeds the 
SourceThreshold and the SecondThreshold has not timed out, and if the 
record is not listed in the BypassArray, then the record is marked as IsSpam = 
True (140) and another record is retrieved and examined (118) until the 
RecentList Array is entirely processed, at which point program execution 

15 proceeds as discussed above. 

Fig. 2 is a flow diagram showing operation of the READACS program in 
connection with the processing of email according to a presently preferred 
embodiment of the invention. While an exemplary process flow is shown in 
20 connection with Fig. 2, those skilled in the art will appreciate that the invention 
is readily implemented with other process flows, and that more or fewer steps 
and different sequences of steps may be used to implement the invention. 
The various defined terms in the immediately following discussion are also 
discussed in greater detail further below. 

25 
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When the process begins (200) an email arrives at an alias account of a host 
system (202). The email is routed to a directory and written as a file having a 
prefix and/or suffix that allows it to be identified as a new email by the 
READACS system (204). The READACS program is executed (as discussed 

5 above in connection with Fig. 1), for example by a UNIX cron or other 
automated execution system (206). The READCS program identifies all files 
in the directory that are spam and renames/moves the files, as defined by the 
user (208). For example, the files may be deleted or they may be cached for 
review and/or analysis. The READACS program then identifies all files in the 

10 directory that are not spam and renames/moves the files, as defined by the 
user (210). For example, the files may be routed to the intended recipient or 
they may be filtered and further routed to an appropriate department. The 
READACS program then ends execution and other system processes 
mail/move/process the files according to the prefix/suffix location of the files 

15 assigned by the READACS program, as defined by the user (212), This ends 
the process (214). 

Fig. 3 is a block schematic diagram that shows an email system the 
incorporate the READACS program according to a presently preferred 

20 embodiment of the invention. In such system, messages are originated by 
various sending entities 12-14 and routed via a public network, such as the 
Internet 10, to a destination mail server 20. At the mail server, the newly 
arrived messages are identified and routed to a directory 22. The READACS 
program 24 is invoked (as described above), and the messages in the 

25 directory are examined and classified as spam or non-spam. Non-spam 
messages are routed to their appropriate destinations 28 in accordance with 
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routing instructions established by the system operator, as is well known in 
the art. Spam is sent to one or more predetermined destinations 26. For 
example, some spam may be deleted upon detection, while other spam may 
be routed to various departments for further analysis. In this way, messages 

5 that are identified as spam but that are not truly spam may be saved and, if 
determined to be valid messages, they may be delivered at a later time. This 
assures that such messages are not inadvertently deleted. Further, 
threatening or harassing messages or persistent spam may be routed to a 
department that investigates such messages, for example ion view of legal 

10 action to be taken against the sender. 

A Scenario 

Company A receives email from a variety of sources. Some of the email is 
15 formatted in a specific manner, other email is free-form. Email arrives via 
alias processes into several directories, depending upon the route taken by 
the email. 

All email to be processed within the company eventually arrives in a directory 
(/mail/to_process) and the company mail system only processes files in this 
20 directory that have the suffix ".ready" attached. After mail is processed, the 
mail file is renamed to ".done" and moved to a different directory, indicating 
that no further processing is to take place on this email file. 

Company A determines that it is occasionally being spammed and desires to 
monitor incoming email and move suspected spam into a directory 
25 (/mail/source_<x>„spam) for further review. 
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The company has the mail directory structure shown in Table A below. 



Table A. Company A Mail Directory Structure 



Source 


Initial Directory 


Final Directory 


Format ' - 


Source_1 


/mail/source__1 


/mail/to_process 


unformatted 


Source_2 


/mail/source_2 


/mail/to_process 


formatted 


Source_3 


/mail/to_proces 
s 


/mail/to_process 


formatted 



5 Items arriving from Source_1 are normal email messages in the SMTP header 
format coming from a variety oi sources. Items arriving in Source„2 are 
formatted in a company-specified format but come from a variety of sources. 
Items arriving in Source_3 are formatted in a company-specified format and 
come from a combination internal and external sources. 

10 Given the information above, Company A configures READACS as shown in 
Table B below. 



15 Table B- Company A READACS Configuration 



;vSourc§T'^C/';/''^.^; V :\ . ' 


Value > ^r- ^ 


Source_1 
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SetRecentFile 


source_1„history.lst 


SetBypassFile 


source_1_bypass.lst 

File contents: 
@aol.com,100 
vS/ pacDeii,nei,ouU 


SetMaillnDirName 


/mail/source_1 


SetDestinationDirName 


/mail/to_process 


SetRenameSuffix 


.ready 


SetSpamDirName 


/mai I/sou rce_1 _spam 


SetSpamSuffix 


.spam 


SetAddrLineLocator 


From: 


Set Add rl nf oLocato r 


@ 


SetSourceThreshold 


10 


SetSecondsThreshold 


3600 (one hour) 


Source_2 




SetRecentFile 


source_2_history.lst 


SetBypassFile 


sou rce_2_by pass . 1st 

File contents: 
(empty) 


SetMaillnDirName 


/mail/source_2 


SetDestinationDirName 


/mail/to_process 


SetRenameSuffix 


.ready 


SetSpamDirName 


/mail/sou rce_2_spam 


SetSpamSuffix 


.spam 


SetAddrLineLocator 


X-WFB_CHANNELJD 
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SetAddrlnfoLocator 


@ 


SetSourceThreshold 


5 


SetSecondsThreshold 


7200 (two hours) 


Source_3 




SetRecentFile 


source_3_history.lst 


SetBypassFile 


sou rce_3„by pass. 1st 

File contents: 

Production iu,yyyyyy 


SetMaillnDirName 


/mail/to_process 


SetDestinationDirName 


/mail/to_process 


SetRenameSuffix 


.ready 


SetExcludeName 


.ready 


SetlncludeName 


wf_ 


SetSpamDirName 


/nn ai I/sou rce_3__spana 


SetSpamSuffix 


.spam 


SetAddrLineLocator 


X-WFB_CHANNELJD 


SetAddrlnfoLocator 




SetSourceThreshold 


10 


SetSecondsThreshold 


3600 (one hour) 



The preceding configurations are described as follows: 
Source 1 configuration 

The history file that is used by FIEADACS to monitor email activity is located 
5 in the same directory as the READACS program and is called 
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"source_1_history.lst". The bypass file is located in the same directory as the 
READACS program and is called "source_1_bypass.lst". This bypass file 
contains two entries that allow for up to 100 email messages to originate from 
any address @ aol.com within one hour and 300 messages from any 

5 originating email address @ pacbell.net within an hour to be allowed before 
marking them as spam (see the discussion of SetSecondsThreshold below for 
reference to one hour). Look for new incoming mail in the /mail/source_1 
directory and, if it is not spam, add a ".ready" suffix to it and move it to the 
/mail/to„process directory. If any email is identified as spam it should be 

10 renamed with a ".spam" suffix and moved to the /mail/sou rce_1_spam 
directory. When looking at email, the line that contains the email address 
should contain "From;" and the address includes the "@" sign. Allow up to ten 
email messages, unless otherwise specified in the bypass file above, from 
any one email address within an hour (3600 seconds) before marking it as 

15 spam. 

Source 2 configuration 

The history file that is used by READACS to monitor email activity is located 
in the same directory as the READACS program and is called 
"source_2_history.lst". The bypass file is located in the same directory as the 

20 READACS program and is called "source_2_bypass.lst". This bypass file 
contains no entries that allow for special handling of particular expected high- 
volume sources. This means that all mail is subject to the value in 
SetSourceThreshold. Look for new incoming mail in the /mail/sou rce_2 
directory and, if it is not spam, add a ".ready" suffix to it and move it to the 

25 /mail/to_process directory. If any email is identified as spam it should be 
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renamed with a ".spam" suffix and moved to the /mail/source_2_spam 
directory. When looking at email, the line that contains the email address 
should contain "X-WFB_CHANNELJD" and the address includes the "@" 
sign. Allow up to five email messages from any one email address within two 
5 hours (7200 seconds) before marking it as spam. 

Source 3 configuration 

The history file that is used by READACS to monitor email activity is located 
in the same directory as the READACS program and is called 
"source__3„history.lst". The bypass file is located in the same directory as the 

10 READACS program and is called "source_3_bypass.lst". This bypass file 
contains one entry that allows for up to 999999 email messages to originate 
from any address from "Production ID" within one hour before marking them 
as spam (see SetSecondsThreshold below for reference to one hour). This 
means that all mail is subject to the value in SetSourceThreshold. Look for 

15 new incoming mail in the /mail/to_process directory and, if it is not spam, add 
a ".ready" suffix leaving it in the /mail/to_process directory. If any email is 
identified as spam it should be renamed with a ".spam" suffix and moved to 
the /mail/source_3_spam directory. When looking at email, the line that 
contains the email address should contain "X-WFB_CHANNELJD" and the 

20 address includes the entire remainder of the line ("") . Allow up to ten email 
messages from any one email address within one hour (3600 seconds) before 
marking it as spam. Additionally, ONLY process items that begin include a 
"wf_" in the name and DO NOT process (exclude) any file that contains 
".ready" in the file name. This is because 1) there may be other files in the 

25 directory that are not really email, i.e. they do not have "wf_" in the name, and 
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2) Source_1 and Source_2 are placing items into this directory as well, so do 
not analyze them again, i.e. exclude any file with ".ready" in the file name. 

Design 

5 Files to be processed are indicated by path (SetMaillnDirName(string)) and 
whether a particular group of files within that directory are set for inclusion by 
name (SetlncludeName(string)) or are to be excluded from processing by 
name (SetExcludeName(string)). If any portion of the file name contains 
either of the strings specified in the SetlncludeName or SetExcludeName 

10 methods the file is included or excluded accordingly. The files that are 
ultimately processed are searched for an address-of-origin to be analyzed. 

An email's address-of-origin is identified by a two-step process: 

1) The line on which an email address may reside is identified 
(SetAddrLineLocator(string)); and 

15 2) the address-of-origin is extracted from the line by searching for an indicator 
(SetAddrlnfoLocator(string)) within the line. 

The address-of-origin within the address line is considered to be the first 
string containing the indicator identified in the SetAddrlnfoLocator and 
bounded by the first space before and after the characters immediately 
20 adjacent to the indicator. If no spaces are found for bounding the address, or 
if no occurrence of the indicator is found the entire line, beginning at the first 
character past the address line locator and continuing to the end of the line, is 
returned as the address-of-origin. 
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When the address-of-origin is obtained it is added to a dynamically-sized 
internal structure array that carries pertinent information about the file, 
including the file's name and time of arrival. This array is eventually merged 
with another structure array that contains more data, e.g. whether the file is 
5 new, if the file's time has expired. If no address-of-origin can be found, the file 
is ignored and no processing, renaming, or moving of the file is performed. 

Messages are analyzed and determined to be spam or non-spam through a 
combination of a time threshold (SetSecondsThreshold(long)), bypass 
exceptions and tolerances (indicated in the bypass file, SetBypassFile(string)) 
10 and a maximum number of allowed messages from any one address 
(SetSourceThreshold(long)). The bypass file is a text file containing two fields 
per line: 

1) The address to be allowed beyond the value indicated in the 
SetSourceThreshold method; and 

15 2) The total number of messages to be allowed from this address before 
considering it to be spam mail. 

It is important to know that the number indicated in SetSourceThreshold and 
the tolerance within the bypass file are bounded within the time frame 
indicated in the SetSecondsThreshold method. In other words, if 
20 SetSecondsThreshold(3600) and SetSourceThreshold(IO) are set and there 
is an entry in the bypass file such as "goofy@isp.com, 100", the user is 
indicating that the system should allow up to ten messages within any one 
hour period before marking it as spam. Additionally, if goofy@isp.com sends 
more than ten messages in any one hour period, further check and allow 

1 5 
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goofy@isp.com to send up to one hundred messages in any one hour period 
before marking it as spam. Each object (an instance of the READACS class) 
can have its own bypass file, or it can be shared. 

Information collected from mail files is assimilated into an internal structure 
5 array. This array is ultimately sorted by address and the logic described 
above is applied in determining which array elements are considered spam 
from those that are non-spam. An item, i.e. message file, within the array that 
has no address is ignored. Information persistence is accomplished by writing 
necessary information to the recent file, as indicated by SetRecentFile(string). 
10 The recent file is created and maintained by the object to which it belongs and 
should never be altered by any other process or user. It may be viewed for 
informational purposes. Note, too, that the size of the recent file is dependent 
upon the value set in the SetSecondsThreshold method and the amount of 
mail files processed within that time. As items expire (that is, information 
15 received x-seconds ago is greater than the value of SetSecondsThreshold(x)) 
they are removed from the recent file. 

Messages, i.e. the files containing each message, are routed and/or renamed 
as either spam, as indicated by SetSpamDirName(string) and 
SetSpamSuffix(string) or non-spam, as indicated by 
20 SetDestinationDirName(string) and SetRenameSuffix(string). The original 
copy is removed from its location that was indicated in the SetMaillnDirName 
method. 

Implementation 



For unattended operation a READACS object can be executed (Execute()) by 
a cron cycle. The cyclic rate of calls to the Execute method for an object 
should be greater than the value set in the SetSecondsThreshold method. 
That is, if the value provided to SetSecondsThreshold is 1800 (1/2 hour), then 
5 the cron cycle should be executing more often than once per half-hour. 
Ideally, the cyclic cron rate - to - SetSecondsThreshold value ratio should be 
high and never fall below one (cron minutes *60 / GetSecondsThreshold >= 

There may be more than one READACS object within a particular program. 
10 As an alternative, a single READACS object may be completely redefined 
after each call to the Execute method to provide a different behavior each 
time the object's Execute method is called. 

The presently preferred implementation of READACS allows a maximum level 
of flexibility. The minimum implementation parameters are validated at the 
15 invocation of the Execute method. Required parameters are as follows: 

1 . The path and/or name of the recent file (SetRecentFile). 

2. The path and/or name of the bypass file (SetBypassFile). 

3. The incoming mail directory (SetMaillnDirName). 

4. The directory and/or file name suffix for non-spam mail 
20 (SetDestinationDirName and SetRenameSuffix). 

5. The directory and/or file name suffix for spam mail (SetSpamDirName and 
SetSpamSuffix). 
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6. The number of seconds to accumulate information before clearing it 
(SetSecondsThresiiolcl). 

7. The number of occurrences of any one address to allow within the value 
passed to the SetSecondsThreshold (SetSourceThreshold). 

5 8. The string for which to search within each file processed to determine if 
this line should contain an address (SetAddrLineLocator); this is normally 
"From: ". Only the first occurrence of the locator within the file is 
evaluated. 

Optional parameters may be specified as well. The optional parameters are 
10 listed here: 

1 . Partial file names to be excluded from processing (SetExcludeName); any 
file including the string specified is excluded from processing. 

2. Partial file names to be included in processing (SetlncludeName); only 
files including the string specified is processed. 

15 3. A suffix for processed non-spam files (SetRenameSuffix); only optional if 
SetDestinationDirName is defined. 

4. A destination directory path for non-spam files (SetDestinationDirName); 
only optional if SetRenameSuffix is defined. 

5. A suffix for processed spam files (SetSpamSuffix); only optional if 
20 SetSpamDirName is defined. 

6. A destination directory path for spam files (SetSpamDirName); only 
optional if SetSpamSuffix is defined. 
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7. A string defining what sliould be considered an address within a line 
previously identified by the AddrLineLocator above (SetAddrlnfoLocator); 
this is normally an "@" sign and is ultimately evaluated to an address-of- 
origin bounded by spaces (not included). If SetAddrlnfoLocator is not 
5 called, or is set to an empty string, the entire line after the value of 
SetAddrLineLocator is returned. 

Care must be taken to be certain that the owner of the execution process has 
sufficient rights and privileges to all paths and files that are examined and/or 
processed by READACS. 

10 Table C below is a user interface methods listing. 



Table C. User Interface Methods Listing 



Retur 
n 

Type 


Method 


Description ■ ' . " ■ : ' 


int 


ExecuteO 


Begins processing files as configured. 


string 


GetAddrlnfoLocatorQ 


Returns the string value that was set 
by the SetAddrlnfoLocator() method. 


string 


GetAddrLineLocatorO 


Returns the string value that was set 
by the SetAddrUneLocatorQ method. 


string 


GetBypassFlleO 


Returns the string value that was set 
by the SetBypassFileQ method. 


string 


GetDestinationDirNameO 


Returns the string value that was set 
by the SetDestinationDirName() 
method. 


string 


GetExcludeNameQ 


Returns the string value that was set 
by the SetExciudeNameQ method. 
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string 


GetlncludeNameO 


Returns tlie string value that was set 
by the SetlncludeName() method. 


string 


GetMaillnDirNanneO 


Returns the string value that was set 
by the SetMaillnDirNanne() method. 


string 


GetRecentFileO 


Returns the string value that was set 
by the SetRecentFile() method. 


string 


GetRenameSuffixQ 


Returns the string value that was set 
by the SetRenameSuffix() method. 


long 


GetSecondsThresholdO 


Returns the long integer value that 
was set by the 
SetSecondsThreshoIdQ method. 


long 


GetSourceThreshoidO 


Returns the long integer value that 
was set by the SetSourceThreshold() 
method. 


string 


GetSpamDIrNameO 


Returns the string value that was set 
by the SetSpamDirNameQ method. 


string 


GetSpamPrefixO 


Returns the string value that was set 
by the SetSpamPrefix() method. 


string 


GetSpamSuffixO 


Returns the string value that was set 
by the SetSpamSuffixQ method. 


void 


PrintBypassListArrayO 


Prints to standard output the contents 

BypassListArray, which is ultimately 
the entries within the file identified by 
the GetBypassFileO method. 


void 


PrintNewListArrayO 


Prints to standard output the contents 
of the private structure array 
NewListArray, which is ultimately a list 
of filp<^ and thpir fi^^aoiriff^ci flrnf^^ of 

\ji tiiwo Cii IV4 iii^ii doovjo 1 Clio ^M( lilt too \J\ 

arrival that have been processed 
during the current invocation of the 
ExecuteO method. 
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void 


PrintRecentListArrayO 


Prints to standard output the contents 
of the private structure array 
RecentUstArray, which is ultimately a 
list of all addresses (and associated 

ir*i^ o o Q ot o 1" i o "I" i o o ^ thot thio 
prUOtJoocvJ otd-LlollOoJ Uilo 

READACS object has processed 
within the x-time specified in the 
SetSecondsThreshold(x) method. 


void 


Set Add rl nf oLocator(st ring) 


Sets an email address identifier. The 
line identified as an email address line 
will be searched for the first 
occurrence of the value indicated by 
tn© sinny pardmeier. unuer mosx 
conditions this parameter will be set to 
"@", but may be any desired string 
value. 


void 


SetAddrLineLocator(string) 


Sets an email address line identifier. 
The mail file will be searched for the 
first occurrence of the value indicated 
Dy tne siring parameter, unoer most 
conditions this parameter will be set to 
"From:", but may be any desired string 
value. 


void 


SetBypassFile(string) 


Sets the name (including path, if 
desired) of the file that will contain any 
email addresses that require special 
high-volume consideration. The 
format of the file is: 

address, tolerance<CrLf> 

where address is the address of 

optdOldl OUi lolLIc;! cillUl 1 dllU LLUfcJF dl lOfc? lb 

the number of items to allow from this 
address within the time range set by 
the SetSecondsThreshold method. 
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Qpt<^ thp riirprtnrv n?^th to whirh nnn- 

spam email is moved. This path is 
required if SetRenameSuffix is not 
defined; otherwise, it is optional. 


void 


SetExcludeName(string) 


Sets a string value for which to search 
flip namp*^ in thp dirprtorv dpfinpd in 
SetMaillnDirName. Any file containing 
the string defined will be excluded 
from processing and left as-is. 


void 


SetlncludeName(string) 


Sets a string value for which to search 

flip npimpci in thp Hirpptorv dpfinpH in 

iii^ 1 icii 1 i^o 111 11 \j 1 1 IV-' 1 y v^wiiiiou III 

SetMaillnDirName. ONLY files 
containing the string defined will be 
processed. 


void 


SetMaillnDirName(string) 


Sets the directory path containing 
incoming email files to be processed. 


void 


SetRecentFile(string) 


Sets the name (including path, if 
desired) of the address history. THIS 
FILE SHOULD NOT BE MODIFIED 
BY ANY USER OR PROCESS 
OTHER THAN READACS. The file 

\A/iH ]r\a r^rocatciW an/H rr^o into inor^ 
WIN UKy OlocilovJ cillvJ 1 1 Ictll 1 Idl I loVJ Uy 

READACS. Be sure to set 
permissions on this file and directory 
for read/write. 


void 


SetRenanneSuffix(strjng) 


Sets the rename suffix to be added to 

qII nfM^-cpiam pmail aftpr it ic 
dii iiOM ojJciiii oiiiciM diioi 11 io 

processed. This name is required if 
SetDestinationDirName is not defined; 
otherwise, it is optional. 


void 


SetSecondsThreshold(long) 


Sets the number of seconds to 
remember addresses in history. 
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void 


SetSourceThreshold(long) 


Sets the maximum number of mail to 
accept from a particular address within 
the value set in SetSecondsThreshold 
before treating it as spam. This 

liWt3o(lVJlU Illciy Ufc? UVclllUUtMi Ul 1 Cli 1 

address-by-address basis within the 
file indicated by the SetBypassFile 
method. 


void 


oeioparnuirNanrie^siringj 


1 ne uireciory inio wnicn an email Tiies 
identified as spam will be moved. This 
name is required if SetSpamSuffix is 
not defined; otherwise, it is optional. 


void 


SetSpamPrefix(string) 


Sets the rename prefix to be added to 
all spam email after it is processed. 
This name is required if 
SetSpamDirName and SetSpamSuffix 
are not defined; otherwise, it is 
optional. If a value is entered, any file 
name whose prefix matches the value 
passed in this method will be excluded 
from processing. 


void 


SetSpamSuffix(s1:ring) 


Sets the rename suffix to be added to 
all spam email after it is processed. 
This name is required if 
SetSpamDirName and SetSpamPrefix 
are not defined; otherwise, it is 

UpLIUildl. 11 ct VdlUo lb fc?IUt3lcU, dliy lllc 

name whose suffix matches the value 
passed in this method will be excluded 
from processing. 



Although the invention is described herein with reference to the preferred 
embodiment, one skilled in the art will readily appreciate that other 
applications may be substituted for those set forth herein without departing 
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from the spirit and scope of the present invention. Accordingly, the invention 
should only be limited by the Claims included below. 
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